CVE-2020-4018

Summary

The setup resources in Atlassian Fisheye and Crucible before version 4.8.1 allows remote attackers to complete the setup process via a cross-site request forgery (CSRF) vulnerability.

Affected Software

VendorProductVersion RangeStatus
AtlassianCrucibleunspecified < 4.8.1affected
AtlassianFisheyeunspecified < 4.8.1affected

Weaknesses

  • Cross-Site Request Forgery (CSRF)

ADP Enrichment

CVE Program Container

Additional References

References